![Malicious npm Package Typosquats react-login-page to Deploy Keylogger](https://cdn.sanity.io/images/cgdhsj6q/production/007b21d9cf9e03ae0bb3f577d1bd59b9d715645a-1024x1024.webp?w=400&fit=max&auto=format)
Research
Security News
Malicious npm Package Typosquats react-login-page to Deploy Keylogger
Socket researchers unpack a typosquatting package with malicious code that logs keystrokes and exfiltrates sensitive data to a remote server.
@babel/plugin-proposal-object-rest-spread
Advanced tools
Package description
The @babel/plugin-proposal-object-rest-spread package allows developers to use the object rest and spread properties syntax in their JavaScript code. This syntax is part of the ECMAScript proposal and enables more concise and readable code when copying properties from one object to another or collecting the remaining properties of an object after certain properties have been extracted.
Object Spread
Allows an object's own enumerable properties to be copied into a new object. This is useful for creating a new object with the same properties as an existing object or for combining multiple objects.
{ ...source }
Object Rest
Enables extracting properties from objects and binding the remaining properties to a new object. This is useful for omitting certain properties from an object and keeping the rest.
const { a, b, ...rest } = source;
A polyfill for Object.assign which is a method used to copy the values of all enumerable own properties from one or more source objects to a target object. It is similar to the spread operator but does not allow for rest properties and is not a Babel plugin.
A library for deep (recursive) merging of objects. It is similar to object spread in that it allows for combining objects, but it goes deeper, merging nested objects as well, which is not something object spread syntax does by default.
Part of the Lodash library, this function is used for a deep merge of own and inherited enumerable properties of source objects into the destination object. It's more powerful than the spread operator in terms of deep merging capabilities.
A port of the classic jQuery.extend() method to Node.js. It can be used to copy properties from one or more source objects to a target object, similar to the spread operator, but it is not specifically a Babel plugin and does not handle the rest properties syntax.
Changelog
v7.20.7 (2022-12-22)
babel-helper-member-expression-to-functions
, babel-helper-replace-supers
, babel-plugin-proposal-class-properties
, babel-plugin-transform-classes
babel-helpers
, babel-plugin-proposal-class-properties
, babel-plugin-transform-classes
, babel-plugin-transform-object-super
babel-parser
, babel-plugin-transform-typescript
babel-traverse
.parentPath
after rename in SwitchCase
(@nicolo-ribaudo)babel-plugin-transform-typescript
, babel-traverse
babel-plugin-transform-block-scoping
babel-plugin-proposal-async-generator-functions
, babel-preset-env
for await
with shadowed variables (@liuxingbaoyu)babel-generator
, babel-plugin-proposal-optional-chaining
(a ?? b) as T
(@liuxingbaoyu)babel-plugin-transform-react-jsx
, babel-types
JSXText
(@liuxingbaoyu)babel-core
, babel-helpers
, babel-plugin-transform-computed-properties
, babel-runtime-corejs2
, babel-runtime-corejs3
, babel-runtime
babel-helper-member-expression-to-functions
, babel-helper-replace-supers
, babel-plugin-proposal-class-properties
, babel-plugin-transform-classes
babel-generator
TSEnumMember
(@liuxingbaoyu)babel-plugin-transform-block-scoping
, babel-traverse
babel-helper-define-map
, babel-plugin-transform-property-mutators
@babel/helper-define-map
(@nicolo-ribaudo)babel-core
, babel-plugin-proposal-class-properties
, babel-plugin-transform-block-scoping
, babel-plugin-transform-classes
, babel-plugin-transform-destructuring
, babel-plugin-transform-parameters
, babel-plugin-transform-regenerator
, babel-plugin-transform-runtime
, babel-preset-env
, babel-traverse
transform-block-scoping
plugin (@nicolo-ribaudo)babel-helper-compilation-targets
getTargets
(@liuxingbaoyu)Readme
Compile object rest and spread to ES5
See our website @babel/plugin-proposal-object-rest-spread for more information.
Using npm:
npm install --save-dev @babel/plugin-proposal-object-rest-spread
or using yarn:
yarn add @babel/plugin-proposal-object-rest-spread --dev
FAQs
Unknown package
We found that @babel/plugin-proposal-object-rest-spread demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers unpack a typosquatting package with malicious code that logs keystrokes and exfiltrates sensitive data to a remote server.
Security News
The JavaScript community has launched the e18e initiative to improve ecosystem performance by cleaning up dependency trees, speeding up critical parts of the ecosystem, and documenting lighter alternatives to established tools.
Product
Socket now supports four distinct alert actions instead of the previous two, and alert triaging allows users to override the actions taken for all individual alerts.